Microsoft Warns OAuth Redirect Abuse Delivers Malware to Government Targets
Microsoft details OAuth redirect abuse used to deliver ZIP malware and EvilProxy links to government targets.
More info